[Apparmor-general] AppArmor definition of a home directory too rigid

[Andreas Hasenack]

On Wed, Aug 01, 2007 at 11:09:17PM -0700, John Johansen wrote:
> profiles should now be using @{HOME} and if they don't it is a bug.
> 
> the @{HOME} variable can be modified be editing 
> /etc/apparmor.d/tunables/home

What about having this variable redefined on-the-fly for each user's
real home directory? Some may be in /home, others in /var/lib (system
users), others in /home/group/whatever, etc. Just a quick thought.